Privacy Policy

This Privacy Policy describes how ANZLabsAI LLC, a Virginia limited liability company, doing business as "340B Audit OS" ("ANZLabsAI", "we", "us") collects, uses, and shares information in connection with the 340B Audit OS service.

• Account data: name, email, organization, role, authentication identifiers.
• Customer Data: administrative, financial, and program-eligibility documents and answers you upload or enter. The Service is designed for non-PHI data only (see Terms § 2.3).
• Usage data: pages visited, actions taken, timestamps, IP address, user agent, error diagnostics generated by the application.
• Payment data: processed by Stripe; we receive transaction status and the last four digits of the card, but not full card numbers.

• To provide, secure, and improve the Service.
• To generate mock-audit analytics and findings from Customer Data.
• To process payments and manage your subscription.
• To respond to support requests and communicate service notices.
• To comply with legal obligations and enforce our Terms.

Some Service features send prompts derived from Customer Data to third-party AI models via the Lovable AI Gateway (which routes to upstream providers, currently including Google's Gemini family). We do not use Customer Data to train foundation models. See our AI Disclaimer.

We share information only with:

• Subprocessors listed on our Security & Subprocessors page (Supabase, Stripe, Lovable AI Gateway).
• Legal/safety recipients when required by law, subpoena, or to protect rights and safety.
• A successor entity in connection with a merger, acquisition, or asset sale.

We do not sell personal information.

We retain Customer Data for the life of your account plus a reasonable period for backups, dispute resolution, and legal compliance. You may request deletion at any time by contacting us.

We use industry-standard administrative and technical safeguards, including encryption in transit (TLS) and encryption at rest provided by our infrastructure subprocessors. See Security & Subprocessors. No system is perfectly secure.

Depending on your jurisdiction (e.g., California, EU/UK), you may have rights to access, correct, delete, port, or restrict processing of your personal information. Contact us at [email protected].

The Service is not directed to children under 13 and we do not knowingly collect their information.

The Service is operated from the United States. If you access it from outside the U.S., you consent to processing in the U.S.

We will update this Policy as needed; the "Last updated" date will reflect the change.

ANZLabsAI LLC — Privacy: [email protected]